lichenblankie/tinyweb
2
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity Actions
No description
14 commits 2 branches 0 tags 10 MiB
Find a file
lichenblankie c4e9fb87a6 bookmark auth, CSP, per-session CSRF 
- Bookmark endpoint now requires a secret token (stored in settings)
- Style reset moved from GET to POST with CSRF protection
- Open redirect prevention in _redirect() helper
- Import capped at 100 URLs to prevent abuse
- page_tags cleaned up on delete + PRAGMA foreign_keys enabled
- CSP, X-Frame-Options, X-Content-Type-Options on all responses
- CSRF tokens now per-session via double-submit cookie pattern
- Tag names URL-decoded for special characters
- Gateway forwards cookies in request data
2026-06-05 05:26:51 +00:00
themes themes folder + kodama template 2026-06-05 05:26:51 +00:00
.gitignore themes folder + kodama template 2026-06-05 05:26:51 +00:00
app.py bind to 0.0.0.0 for remote access 2026-06-05 05:26:51 +00:00
db.py bookmark auth, CSP, per-session CSRF 2026-06-05 05:26:51 +00:00
gateway.py bookmark auth, CSP, per-session CSRF 2026-06-05 05:26:51 +00:00
handlers.py bookmark auth, CSP, per-session CSRF 2026-06-05 05:26:51 +00:00
README.md first commit 2026-06-05 05:22:37 +00:00
requirements.txt port to Reticulum mesh 2026-06-05 05:26:51 +00:00
rns_client.py mesh subscriptions + search 2026-06-05 05:26:51 +00:00
templates.py custom template editor, UI cleanup 2026-06-05 05:26:51 +00:00

README.md